$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer (raw, json) Hash identifier: qSDvc7Rm6O9BpIXumllPzt/x000kVpbDOFyO006LZS4= Subject key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2FAB374A3191E8E8565BAEF42BB77C72DAA1E268 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft caRepository: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 23 Jul 2026 20:35:28 +0000 Certificate not after: Thu 22 Jul 2027 20:40:28 +0000 Subordinate resources: AS: 273404 IP: 2804:8e20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ab:37:4a:31:91:e8:e8:56:5b:ae:f4:2b:b7:7c:72:da:a1:e2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 23 20:35:28 2026 GMT Not After : Jul 22 20:40:28 2027 GMT Subject: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:53:b7:30:18:89:bc:39:f6:44:e4:b6:2a: 42:db:1e:c2:37:c0:8e:70:b4:68:33:4c:7b:3e:db: 7c:8d:c1:05:0d:5d:c4:ff:a6:df:2b:7a:3d:0c:1a: 10:9d:43:bc:93:e6:cc:87:f9:81:ff:9d:b1:b0:61: e2:33:47:44:37:85:e6:8e:e5:57:2e:d2:40:53:9d: de:19:4c:2b:93:61:d9:0c:96:82:16:61:71:8f:04: 2d:09:32:c0:0d:03:d1:b4:9d:eb:ba:67:a4:41:fc: 7e:2e:e5:bf:3c:94:7f:fe:c1:52:3e:21:fb:79:ff: 91:aa:a6:fb:21:5b:d0:84:5b:6a:d3:95:b0:2c:41: 38:1c:45:b1:36:bf:6e:57:dc:7a:a7:00:6f:42:30: 9f:58:fa:e2:05:88:7b:95:a1:58:19:25:85:0e:ae: 68:27:70:e5:2a:b5:f9:a0:31:29:aa:63:2f:34:59: 4a:31:a5:34:bd:ff:b2:bf:84:32:ca:a9:d7:42:4d: 48:f6:ac:87:39:b5:d5:37:4f:30:e8:f0:a7:24:f1: cc:da:eb:40:01:e2:a1:85:6d:fa:6c:97:1e:3a:09: 85:f2:f9:c7:1a:21:3d:ed:1b:33:2c:63:66:55:df: cb:f0:6f:a2:35:d8:ae:70:76:ad:be:e8:fc:7d:b7: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273404 Signature Algorithm: sha256WithRSAEncryption b8:72:69:6a:72:b6:ec:9b:70:cc:60:7f:af:67:ab:49:a8:c8: 5a:3a:f3:78:77:ea:57:ad:f9:fe:00:d8:9a:8e:22:14:06:99: 85:31:c6:e7:cf:5f:58:e0:99:89:b5:be:5b:d0:da:2a:14:28: c6:aa:31:e2:29:d2:e5:2b:df:28:c8:65:01:b0:73:02:d2:29: 84:99:78:d5:71:62:aa:18:3a:d2:98:6e:44:a4:50:34:08:40: 37:23:84:de:50:50:93:ae:d3:a5:93:b5:0e:f5:68:5c:24:67: 85:ba:c1:2f:74:fa:56:0f:a9:17:66:38:3c:ec:1f:14:5f:97: 8d:dd:58:76:75:c9:e8:a5:5d:97:b7:d0:46:c4:2c:33:c0:a5: 9c:34:c6:51:0e:7c:1d:70:f2:08:c1:4d:b3:c3:bb:e9:a3:68: 1d:07:30:f0:9b:f7:46:d9:24:6f:bf:88:f3:3a:c2:3e:09:d3: b3:8c:30:71:66:9c:79:63:5a:3a:c5:0f:b6:47:ce:96:c1:6f: b8:89:3f:99:e0:7a:39:fe:f7:81:ed:26:9d:88:c8:21:1c:30: 44:aa:e0:52:2c:98:0c:1e:96:00:af:77:71:d7:41:46:23:b3: e9:65:51:39:c6:7e:f3:fc:fd:3d:f1:d5:51:ab:2c:d0:15:04: 50:78:bd:00 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUL6s3SjGR6OhWW670K7d8ctqh4mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA3MjMyMDM1MjhaFw0yNzA3MjIyMDQwMjhaMDMxMTAvBgNV BAMTKERGMzRBRkU0QzM1MjU5RUEwRTBBQjkzQTM0MERGMTM5RTg2QjhEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsFO3MBiJvDn2ROS2KkLbHsI3 wI5wtGgzTHs+23yNwQUNXcT/pt8rej0MGhCdQ7yT5syH+YH/nbGwYeIzR0Q3heaO 5Vcu0kBTnd4ZTCuTYdkMloIWYXGPBC0JMsANA9G0neu6Z6RB/H4u5b88lH/+wVI+ Ift5/5GqpvshW9CEW2rTlbAsQTgcRbE2v25X3HqnAG9CMJ9Y+uIFiHuVoVgZJYUO rmgncOUqtfmgMSmqYy80WUoxpTS9/7K/hDLKqddCTUj2rIc5tdU3TzDo8Kck8cza 60AB4qGFbfpslx46CYXy+ccaIT3tGzMsY2ZV38vwb6I12K5wdq2+6Px9t/OHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfNK/kw1JZ6g4K uTo0DfE56GuNtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1R0 VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NU dFVibzJlcXA4Y0dhdVZrUUNUaWZIUXVhZUU1VmZTaVlwNFR3WGVYMUo5LzAvREYz NEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlFODZCOERCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME K/wwDQYJKoZIhvcNAQELBQADggEBALhyaWpytuybcMxgf69nq0moyFo683h36let +f4A2JqOIhQGmYUxxufPX1jgmYm1vlvQ2ioUKMaqMeIp0uUr3yjIZQGwcwLSKYSZ eNVxYqoYOtKYbkSkUDQIQDcjhN5QUJOu06WTtQ71aFwkZ4W6wS90+lYPqRdmODzs HxRfl43dWHZ1yeilXZe30EbELDPApZw0xlEOfB1w8gjBTbPDu+mjaB0HMPCb90bZ JG+/iPM6wj4J07OMMHFmnHljWjrFD7ZHzpbBb7iJP5ngejn+94HtJp2IyCEcMESq 4FIsmAwelgCvd3HXQUYjs+llUTnGfvP8/T3x1VGrLNAVBFB4vQA= -----END CERTIFICATE-----Generated at Thu Jul 23 21:59:47 2026 by rpki-client